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BACKGROUND OF THE INVENTION 

1 . Field of the Invention 

The present invention relates to a system for 
protecting the unauthorized use of software transmitted 
over a communication link and more particularly to a 
system in which the software is encrypted with a unique 
software key that only allows the software to be 
uploaded into a unit, such as global positioning system 
(GPS) unit, with a matching software key. 

2. Description of the Prior Art 

Global positioning systems are known to be used 
in aircraft and other vehicles for navigation. Such GPS 
systems not only pr ovide the position of the aircraft or 
vehicle but jnay^ also be Tnte grat:ed with topographical 
a^idTor navigationa^ such a^ terrain ^a^Ld"'aXrport 

topographical data as well as highway maps stored in a 
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database , to' provide an indxcat ion of the vehicle or 
aircraft relative to the topographical data or highway 
information. For example, as disclosed in U.S. Patent 
Application Serial No. 08/509,642 filed on July 31, 
5 1995, assigned to the same assignee of the present 

invention, the topographical data, such as the elevation 
of the highest obstacles within a predetermined region, 
are stored in a memory device aboard the aircraft. The 
GPS allows the topographical data to be displayed as a 

10 function of the position of the aircraft. 

Often times, the topographical ^^nd^avigatimial 
data needs_ to be updated^ du^^j^^hanging typography and 
highway information. B ecause of t he relartive ease in 
which software that is transmd^tj^^^ Internet can 

15 be duplTcated, updates of the topographical data is 



known to be provided in a diskette c/r cartridge^prm and 




mailed^ to the^ customers . TypicalLy, users of such 
integrated GPS systems must first determine if an update 
is available by checking with t^e database vendor. 

20 Orders are typically placed by telephone. The update 
diskette or cartridge is then mailed to the customer. 
As such, from the time the/order is placed, considerable 
time passes before the updated topographical data is 
actually received by the customer so it can be uploaded 

25 into the customer's integrated GPS unit. The delay is 
even more acute f or^mternational customers for which 
the mailing time x& considerably greater. 

There are oth^r^robl_em associated with 
providing updated topographical and navigational data on 

30 diskettes or cartridges to a customer. For example, for 
customers that have multiple integrated GPS units, the 
customer may choose to upload the updated data onto such 
multip le units even though the cu stome r has only paid 
for the update f Q^r a. singj.^ ju^^ . The customer may also 

35 transfer the update diskette or cartridge to another 
unauthorized user. 
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sujVcviary of the invention 

It is an object of the present invention to 
solve various problems in the prior art. 

It ^is yet another object of the present 
5 invention to provide a system for preventing 

unauthorized use of a database or other software 
transmitted over a communication link, such as the 
Internet . 

Briefly, the^ present inve ntion relates to a 
10 system for transmitting a database Q t- j^g ^ g Q|,]^,^^^ 
over a communication link, such as the Internet^^^hd^ 
prevents unauthorized use. In order to prevent such 



unauthorized use, t he customer' s equi pment , such as a 
GPS unit, is provided with a unique software key. The 



^ 15 updated d ata.base_ is ojrdered J^.^ communication link 

^ ^£Z__P^*^Yi^'iB9----^ software key and may include 

^ electronic payment information. The database is 

L| encrypted,^ fo^ example, ^^s a function of the unique 

\M software kjey and transmitted over the communication link 

L?^ 20 in encrypted form along with an upload program. The 

iQ upload program only allows the encrypted database to be 

uploaded into a unit with a matching software key. As 
such, the system allows updated databases to be 
transmitted rather quickly and easily over a 
25 communication link while preventing unauthorized use. 

DESCRIPTION OF THE DRAWINGS 

These and other objects of the present 
invention will be readily understood with reference to 
30 the following specification and attached drawings 
wherein : 

FIG. 1 is a graphical illustration of an 
exemplary Internet page layout in accordance with the 
present invention; 
35 FIG. 2 is a simplified representation of a 

dialog box which may form a part of one of the Web pages 



# 
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"fc3r'user inf ormationy such as' the unique' software key, 
in accordance with the present invention; 

FIG. 3 is a simplified view of a personal 
computer interfacing with an Internet server in order to 
5 provide user information; 

FIG. 4 is similar to FIG. 2 illustrating the 
process of downloading the software from the Internet to 
a user's personal computer; 

FIG, 5 is a simplified graphical representation 
10 illustrating the uploading of the software from the 

Internet being transferred between a personal computer 
and a product, such as an integrated global positioning 
system (GPS) unit; 

FIG. 6 is a block diagram illustrating the data 
15 flow and the organization of the software on the 
Internet server in accordance with the present 
invention; 

FIG. 7 is a simplified flowchart illustrating a 
portion of the system in accordance with the present 

20 invention for ordering. software over the Internet; 

FIG. 8 is a graphical representation of a 
dialog box for user payment information which may form a 
portion of one of the Web pages illustrated in FIG. 1 in 
accordance with the present invention; 

25 FIG. 9 is a graphical illustration of a dialog 

box for enabling users to provide information regarding 
the requested software as well as a unique software key 
which may form a portion of one of the Web pages 
illustrated in FIG. 1 in accordance with the present 

30 invention; 

FIG. 10 is a graphical illustration of a dialog 
box for the user's desired payment method which may form 
a portion of one of the Web pages illustrated in FIG. 1 
in accordance with the present invention; 

35 FIG. 11 is a graphical illustration of a 

confirmation page which may form a portion of one of the 



Web pages illustrated in FIG. 1 which enables the user 
to download software over the Internet in accordance 
with the present invention; 

FIG. 12 is a flowchart of the system in 
accordance with the present invention which provides 
copy protection for software transferred over the 
Internet in accordance with the present invention; 

FIG, 13 is a flowchart of the software at the 
server for encrypting the software to be transferred 
over the Internet in accordance with the present 
invention; and 

FIG. 14 is a flowchart of the decryption 
process for uploading software transferred over the 
Internet to a customer's unit, such as an integrated 
global positioning system (GPS) unit. 

nKTAn.FT > DESCRIPTION 

The present invention relates to a system for 
preventing unauthorized use of a database or other 
software transmitted over a communication link, such as 
the Internet, for use in particular electronic 
equipment, such as a global position system (GPS) unit. 
As mentioned above, such systems utilize topographical 
data for various regions of the world in order to 
display the topographical data as a function of the 
position of the aircraft. Heretofore such GPS units 
have been sold with topographical and/or navigational 
data stored in a database on cartridges or diskettes. 
Updated databases are known to be shipped through the 
mail. Such a process takes a relatively long period of 
time. The system in accordance with the present 
invention allows the database update to be transmitted 
over communication links, such as the Internet quickly 
and easily while virtually eliminating unauthorized use 
of the database information. More particularly, each 
GPS un it is pr ovided with a unique software ^ey. The 



^ jonique key is an 8 d igit' hexa 
b e^ embedde d in a readonly memory (ROM) within the GPS 
unit or stored within a removable cairtridge at the 
f actory~"prior to a CPS' unit being shipped to the 
customer. The user uses the unique software key to 
order update software, such as an update database for 
the GPS unit, over the communication link and upload the 
database into a GPS unit with a matching software key, 
for example as illustrated in FIGS. 3, 4 and 5. For 
example, the user simpl y connects to the G PS^da tabase o r 
other software vendor's h ome page on the Worldwide Web. 
After provd^J^n^^ unique softw are key number as well 
as the desir^ d^ayment method, the database or other 
software is^ncrypted as a function of the^unique 
software key at the Internet server, for example. The 
elicry pted so jEtware is trans mitted to the user o yer the 
Internet along with a decryption program which only 



allows the software to be uploaded into a GPS unit 
having a matching key. Since the updated database is 
encrypted as a function of the unique software key, any 
attempts to upload the software into a unit not matching 
the unique software key will be futile. Although 
multiple copies of the encrypted database can be made, 
the system in accordance with the present invention 
prevents these encrypted copies from being uploaded into 
multiple GPS units. 

The present invention is suitable for updating 
the topographical information stored in databases for 
use with various integrated GPS systems, such as, KLX 
100 GPS/COMM, KLN 98/KLN 89B GPS, KLN 90B GPS and KLN 
900 GPS, available from AlliedSignal , Incorporated. 
Although the system in accordance with the present 
invention is described and illustrated in terms of 
transferring updated database information for an 
integrated GPS over the Internet, the principles of the 
present invention are clearly applicable to protecting 



virtually "any type of sof tware transmitted over ' 
virtually any communication link; wired or wireless. 

It is also to be understood that the principles 
of the present invention are also applicable to ot her 
forms of electronic transfer that do not involve the 



Internet and may be implemented for transferring 
software over virtually any communication link, such as 
a modem and even a wireless link. Moreover, as will be 
discussed in more detail below, a personal computer is 
used t^o_a£cess_t^ for example, which 

contains the software to be transferred as illustrated 
in FIGS. 3 and 4. The^esired software is then 
encrypted and transferred along with a decryption 
program back to the personal computer, which, in turn. 



is used to transfer and^decry^ into a 

separate electronic unit, such as an integrated GPS 
unit. However, it should also be understood that the 
p r i iici p 1 e s of ..^ t h e _p res e n t^.^nve n t i^o^ .^-i^P.. ^,g:PP 1 i c ab 1 e 

to systems in which the desired software is also 



transmitted from a remote communication node, such as an 
internet server, directly to the unit, such as the 
integrated GPS unit itself. 

Referring to FIG. 1, an exemplary Web page 
layout is illustrated. The exemplary Web page layout 
includes a home page 22. The home page 22 is provided 
with one or more hyperlinks to provide access to the 
succeeding Web pages. As shown, the home page 22, for 
example, as illustrated in FIG. 8, may be provided with 
a hyperlink to a database selection page 24 (FIG. 9) . 
The database selection page 24 enables a user to select 
the specific database. As mentioned above, depending 
upon the type of integrated GPS unit, various update 
databases are available for transfer over the Internet. 
After the particular database is selected from the 
database selection page 24, a hyperlink may be provided 
to a method of payment Web page 2 6 with hyperlinks to a 



credit "card Web'page 2 8 TFIG.' ror^and a" user password 
Web page 30. It is to be understood that the payment 
option is merely optional. The credit card Web page 28 
and the user password Web page 30 allow alternate 
payment methods for the user in systems which include 
electronic payment. The credit card Web page 28 
requires the user's credit card information as well as 
the unique software key (FIG. 2) . Alternatively, the 
system allows for the customer to contact the software 
supplier ahead of time and establish an account. In 
this situation the user merely enters a password for the 
account as well as the unique software key for the unit. 
The credit card Web page 2 8 and the password Web page 3 0 
are provided with hyperlinks to a confirmation page 32 
(FIG. 11) . The confirmation page 32 is merely exemplary 
and is not required for practice of the invention. The 
confirmation page 32 confirms the user's selection for 
the particular database as well as the method of 
electronic payment. If the user enters a confirmation,; 
a hyperlink may be provided on the confirmation page 32 
to initiate downloading of the updated software, which 
is linked to a message page 34 which indicates 
downloading in progress. 

FIGS. 3 through 7 illustrate the present 
invention. As shown, user information is transferred 
over the Internet to one or more Internet servers 3 6 by 
way of a personal computer which may be an IBM 
compatible personal computer or other personal computer 

suitable for connection to the Internet. The software 

. 

is encrypted and then transferred from one or more 
Internet serve r^"~T6 back to the personal computer 3 8 
along with a decrypt^on^^^a^id^^ The^jogloa^ 
program enables the encrypted da^abase^t^^Jbe^^g^ 
into a produ^t^ jtfi^tjhi^ jt^ key, such as an 

integrated GPS unit 40. 



01 



The software layout for the system is 
illustrated in FIG. 6 and includes a user/database 40, a 

7/ 
master "nav" database 42 and an upload orrogram^^W, 
^ identified as NETLOAD.EXE. The user information for 
5 example, regarding account and password information, 

etc. is maintained in the user database 40, accessible 
by the server 36. The topographical information is 
stored in the master "nav" database file 42, also 
accessible by the server 36, ©nee the user provides the 
10 unique software key^^^as^ell ^ the desired payment^ 

method, "^a copy of the topographical and/or navigation 

Q da t a^^ ^J^gf^ ^ J"^^.^ ^ ''^ "^^^"-^■^■^^^^^^..iScJSESE^P ^ 

& function of the unique software key, provided by the 



user and stored in a "keyed DB file" 44. The keyed DB 



M= 15 file 44 is then compresfeed into a zip file 46 and 

transferred to the us^er by way of th^ Internet along 



^ ^ j- 1 h t h e^e c ryp t i r ^Pl^^^ ^^-^^ f^^J identified as 

^ NETLOAD.EXE, The ^ecri^ion^fj-le^^^^ the zip 



yi ' file containing^'he encrypted database to be uploaded 

nJ 20 into a product 4 0 as long as the software key of the 

:~ product matche's the software key to which the database 



key of the 

:he software key to which the databas 
was encrypted. If the software key matches the unique 
key within/the product, the database is decrypted and 
uploadedyinto the product. 
25 A simplified flowchart for the system in 

accordance with the present invention is illustrated in 
FIG. 7, Initially, the user connects to the database 
vendor's home page in step 48, Once connected to the 
database vendor's home page, the user selects a database 
30 from the available databases in step 50, Steps 52 and 
54 provide for alternate payment methods. If a user 
wishes to avoid providing credit information over the 
Internet, the user can obtain a password and an account 
and become a registered user. Thus, the system checks 
35 whether the user is a registered user in step 52, If 
not, the system assumes the payment will be made by 
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credit card in step 54. In boCh steps 52 and 54, the ^ 
user also provides the unique software number that is 
used to encrypt the database as a function thereof . 
After the payment method and unique software key are 
entered, a confirmation page is generated in step 56, 
for downloading the software. 

An overall flow chart is illustrated in FIG. 
12. Initially, the unique software key, for example, 
the 8 digit unique software key unique to the GPS 



system, is rea d from t he GPS unit 4(0 by the user and 
entered on the appropriate Web pages as discussed above 
The sof tware _key_m ay be printed som ewhere on the GPS 
unit 40 to en able the us er simply visually read the 
s o f t wa r e'^ k e y from the unit in step 58. In step 60, the 
user_lo qs Qn jtjQ^t he In ternet, chooses a database product 
and provides the uni que s oftware key for the GPS unit 
40. The__syst em encrypts the selected databas e as a 
fu nction of the unique software key and stored into a 
keyed database file 44 (FIG. 6) in step 62. In order t 
conserve storage space, the keyed database file 44 may 
also be compressed in step 63 and transferred to the 
customer personal computer 3 8 in step 64 along with a 
decryption program 44, identified as NETLOAD.EXE. The 
keyed database file is then uploaded by the user to 
their GPS unit 40 (FIG. 5) with a matching software key 
in step 66. 



keying is illustrated in FIG. 13. After the user logs 
onto the Internet, selects a database and provides the 
unique software key, the system checks in step 68 
whether the desired database is a type KLN 90 database. 
As used herein the KLN 90 type databases relates to the 
type of processor within the GPS unit 40. In 
particular, KLN 90 type databases are formatted for use 
with Intel type processor chips, while the balance of 
the databases are formatted for use with Motorola type 




The flowchart for the database encryption or 



processor chips. Due to the different^ byte storage 
methods between the two processor styles, the system 
checks in step 68 whether request is for a type KLN 90 
database. If so, a temporary file is created in step 70 
with the database key embedded into the original KLN 90 
file from a master KLN 90 database file 72, a subset of 
the master "nav" DB files 42, If the request is for 
other than KLN 9 0 type database, the system proceeds 
directly to step 74, In step 74, starting with the 



first byte, the byte is encrypted a s_ a f unc t i on of the 
database key, tor^j^mgle^^ixy cyclic redundanc^^_co^ding_ 
(CRC) , as discussed below. After the f^ir^^^birte^is,^ 
code d with the dat abase keY^,_the_Jkey_^^^,uj^^ 
next byte in step 76. The keyed or encrypted ^Y^t^^^is^ 
written to an output file 82 for later transmission over 



the Internet to the user's personal computer 38 in step 



78 , This process^s^cont j^ue^d Uj^^ of^he bytes^n 

the database file have been keyed and written to the 



outpujt^J^ile 82 as illustrated by step 80. Aft er all o f 
the bytes have been written to the output file 82, a 
footer tag with data from the original file, including 
checksums, file size, database typ^e^j^^_t^he,,^ef^ 
and the origina,]^ database key are written to the output 
file 82 and sent to the user along with the upload file 



NETLOAD.EXE in step 82 as discussed above. If the 
software key in the GPS unit 40 matches the database 
key, the NETLOAD.EXE file decrypts and uploads the 
updated database into an integrated GPS unit 40. 

.FIG. 14 is a flowc/hart for the decryption 
program^^ (NETLOAD . EXeI /or^'^ipioading the encrypted 
database software to the/cPS unit 40. As mentioned 
above, the encrypted da^iiabase file 82 is provided with 
the encrypted data as ijell as a footer tag which 
includes the original/ software key, checksums, the file 
size, the database t^ype as well as the effective dates 
for the database. /In step 86, the footer tag is read 
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including the s of tware^ jcey f rorrrthg en output 
fil^ 82 As discussed in more detail beLow, the 
so ftware key f rom the footer tag is used/to decrypt the 
fJLrgt^yte of t^g^atabase in step 88^! /After the^iifst 
byte is decrypted, the key is updated For the next byte 
in step 90. After the new key is upda^d, a checksum is 
caJ^ulated_ to^ determl n.e„ if^there are yan y e r ifo r s "Tn'The 
data in step 92. The process of steps^8-92* is repeated 
for__ each byte in the encrypted database file 82, as 
indicated by step 94. After all o^ the^ytes in the 
output file 82 ^^Are ^been^ec^ the system checks in 

step 9 6 to determine whether^^the/ch^ for^h'e 
decrj^Ptjed^filg^jaa^ included in 

the footer tag in the output file 82 in step 96. If 
there are any discrepancies in/ the checksum an error 
message is displayed in step 8 . If the checksums 
match, the system communicates with the GPS'^lanit^'O in 
''s^'ep*^^^ aS3^'''a^ the'^QPS^'linTE'^O^ an' 

identification packet containing the GPS unit type as 
well as the software key. / Once the software key and GPS 
unit type are received from the GPS unit 40, the system- 
determines in step 100 whether the GPS unit type matches 
the database file requested. If not, an error message 
is displayed in step lc/2 . Otherwise, the system 
proceeds to step 104 ^nd 

key received from th4 GPS unTE'^'^'matches the software 
key^ used to encryp^ ^-fa^l^^^^ file and conltained in 

the footer tag mentioned above. If not, an error 
message is displayed in step 106. Otherwise, the system 
proc e eds to st;ep 108 where the software key received 
from the GPS J^it is used to d ecryp t the first byte in 
the output file 82 . After the first byte is decrypted 
or unkeyed,/the key is updated in step 110 for the next 
byte. The/steps 108 and 110 are repeated until a 
sufficient numbe r of bytes have been u nkeyed for a full 
packet as indicated in step 112. Each time a packet is 



full, a packet of decrypted daca is sent to the GPS unit 
40 in step 114. As indicat^O" in step 116, the process' 
i^s^^^re peated until aI JL-.Qf^^ ^e bytes in the encrypte d 
database fi le have fc tejg^ ^J^ocessed > 

Essentially the encryption process is based on 
cyclic redundancy code (CRC) table of 2 56 pseudo random 
numbers from 0 to 255, for example, as illustrated in 
TABLE 1. 



TABLE 1 



CRC TABLE ENTRY 


VALUE 


n 
U 


n 
U 


1 


1996959894 


2 


3993919788 


3 


2567524794 






114 


3188396048 










141 


2466906013 










237 


3736837829 






255 





Initially, a seed CRC value is chosen, for 
example 13579246. The first byte in the database or 
source file is read and added to the seed value. For 
example, if the first byte in the database equates to 
the number 3, the new byte will be the CRC seed value 
(13579246) plus the byte read from the file Boolean 
ANDed with the hexadecimal number FF or 255. For 
example, adding the value of the source byte 3 to the 
seed value of 13579246 would equal the number 13579249. 



-14- 

Taking the number "13579249 and Boolean ANDing it with 
the hexadecimal number 255 yields the number 241. 
Therefore, the new byte written to the file as shown in 
TABLE 2 below will be 241, 



TABLE 2 



ORIGINAL DATA 
FILE 


NEW DATA FILE 


CRC KEY 
(START = 
13579246) 


3 


241 




132 






204 







After the first byte is keyed or encrypted, the 
CRC value for the next byte needs to be updated by 
taking the current CRC value and doing a Boolean 
EXCLUSIVE OR with the original byte. That value, in 
turn is Boolean ANDed with the hexadecimal number 255 
which provides an index into the CRC table (between 0 
and 2 55) . The CRC table value that is looked up with 
that index is then Boolean EXCLUSIVE ORed with the CRC 
value shifted to the right 8 places, for example as 
shown below. 

134579246 ^ 3 = 13579245 

13579245 & 255 = 237 
CRC_TABLE [2 3 7] = 3736837829 

13579246 >> 8 = 53043 

3736837829 ^ 53043 = 3736818166, which is now 



the new CRC value as illustrated in TABLE 3 : 

TABLE 3 



ORIGINAL DATA 
FILE 


NEW DATA FILE 


CRC KEY 
(START = 
13579246) 


1 


3 


3736818166 


132 






204 







^ The process is repeated for each byte in the 
file, for example as shown in TABLE 4 below. 

TABLE 4 



BYTE NUMBER 


ORIGINAL 
DATA FILE 


NEW DATA 
FILE 


CRC KEY 
(START = 
13579246) 


1 


3 


241 


3736818166 


2 


132 


122 


3201674049 


3 


204 


13 


2478254646 



The process is repeated for each byte in the 

file. 

In order to decode or decrypt the data bytes, 
the process is simply reversed starting with the same 
known seed CRC key and the same base CRC table values, 
for example as . illustrated in TABLE 5 below. 



TABLE 5 



BYTE NUMBER 


KEY DATA 
FILE 


NEW DATA 
FILE 


CRC KEY 
(STT^lRT = 
13579246) 


1 


241 






2 


122 






3 


13 







Initially, the first byte from the keyed file 
is read, for example 241. The current value of the CRC 
key (13579246) is subtracted from that value. The 
result (-13579005) is Boolean ANDed with 255 which 
provides a result of 3 which was the original starting 
point for example as shown in TABLE 6 below. 



T7VBLE 6 



BYTE NUMBER 


KEY DATA 
FILE 


NEW DATA 
FILE 


CRC KEY 
(START = 
1359246) 


1 


241 


3 




2 


122 







BYTE NUMBER 


KEY DATA 
FILE 


NEW DATA 
FILE 


CRC KEY 
(START = 
1359246) 


3 


13 







The CRC key is then updated for the next byte. 
In order to update the CRC key essentially the same 
method is used as before. The new byte 3 is EXCLUSIVE 
ORed with the current value of the CRC key (13579246) . 
The result (13579245) is then Boolean ANDed with the 
hexadecimal number 255 with a result of 237 which is 
used as an index to look the CRC value in the CRC lookup 
table . The current example of the index corresponds to 
a table value of 3736837829. The current CRC key 
(13579246) is then shifted to the right 8 places. The 
result 53043 is EXCLUSIVE ORed with the value that was 
looked up in the CRC table (3736837829) by way of the 
index 237. The result 3736818166 is the CRC for the new 
byte, for example as shown in TABLE 7 below. 



TABLE 7 



BYTE NUMBER 


KEY DATA 
FILE 


NEW DATA 
FILE 


CRC KEY 
(START = 
13579246) 


1 


241 


3 


3736818166 


2 


122 






3 


13 







For the next byte the current CRC key 
3736818166 is subtracted from the next byte read 122, 
the result being 558149252. This result 558149252 is 
anded with the hexadecimal number 2 55 to produce the 
next byte 132 which, is the original byte number in the 
original data file. The process is repeated for each 
byte as shown below in TABLE 8 . 



TABLE 8 



BYTE NUMBER 


KEY DATA 
FILE 


NEW DATA 
FILE 


CRC KEY 
(START = 
13579246) 


1 


241 


3 


3736818166 


2 


122 


132 


3201674049 


3 


13 


204 


2478254646 



The process is repeated until the end of the 
file and the end result is that the output file exactly 
corresponds to the original file which was encrypted. 

Obviously, many modifications and variations of- 
the present invention are possible in light of the above 
teachings. Thus, it is to be understood that, within 
the scope of the appended claims, the invention may be 
practiced otherwise than as specifically described 
above . 

What is claimed and desired to be secured by 
Letters Patent of the United States is: 



